$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft File: JhWWtVbpLBLS68jdiyXPuHWOB4w.mft (raw, json) Hash identifier: JPaofyWIrtlwr46SsKcKCl/gY+TfkMKpFG9MzSEQHvg= Subject key identifier: 34:C9:C5:22:13:C7:C9:FB:30:5F:E7:09:6D:DA:6D:5C:A6:C7:0B:1F Authority key identifier: 26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C Certificate issuer: /CN=A91AFC48/serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft Manifest number: 015D Signing time: Sat 23 Aug 2025 04:16:41 +0000 Manifest this update: Sat 23 Aug 2025 04:16:41 +0000 Manifest next update: Sat 30 Aug 2025 04:16:41 +0000 Files and hashes: 1: JhWWtVbpLBLS68jdiyXPuHWOB4w.crl (hash: W/gjguq6FuTc3kshC4uW9fxV7kWjFlgdp6iho99DhEs=) 2: 259AE280753B11EEBF306F35C4F9AE02.roa (hash: XlNDLwL1s4PNyju0F9J/L57gx4vJtRRqq2V9lyDq2Mo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFC48, serialNumber=261596B556E92C12D2EBC8DD8B25CFB8758E078C Validity Not Before: Aug 23 04:16:41 2025 GMT Not After : Aug 30 04:16:41 2025 GMT Subject: CN=68a940a9-0597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:5a:0d:f7:43:7b:e5:1b:37:e6:0e:ee:5c: 03:ed:2a:0a:21:32:62:6f:6b:a3:a4:bb:70:3a:af: b4:c0:e4:1f:3b:cf:0d:ec:9f:79:66:87:35:42:cc: 2a:16:be:38:b9:4e:ee:aa:54:fd:ec:94:08:14:82: 61:c3:36:b2:29:8a:0e:11:13:27:3b:98:3a:82:ea: 11:a2:d2:a1:75:60:0b:b8:e0:ac:ef:f1:a3:9c:b7: c2:d4:a9:27:0f:e6:e5:c6:e5:e1:62:0a:13:e8:4b: 9a:d8:45:50:97:22:f4:47:1e:22:4b:44:4a:a6:2c: 5a:66:1e:dd:5d:4e:e4:95:6d:6e:39:cb:aa:d7:2b: bc:87:e1:6a:21:23:76:89:f3:b4:9b:c4:2b:2c:0a: 59:c7:2d:b7:7d:0a:25:44:60:aa:c1:2d:cf:5a:7b: 36:8b:b5:5f:35:fc:b2:d0:99:4f:b6:99:02:e8:e1: 40:54:2f:4b:2d:7c:30:a3:51:31:da:2b:6d:34:0b: e1:6a:3a:08:e7:d0:87:f2:d5:14:ff:30:67:39:1c: ac:87:3f:2c:80:94:65:e7:04:a3:e1:0f:0e:f3:f1: 2c:b3:5b:19:bf:86:8b:c0:63:05:dd:bd:04:09:25: 5b:31:e9:14:ae:a4:0d:07:1a:2e:36:82:93:53:79: c1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C9:C5:22:13:C7:C9:FB:30:5F:E7:09:6D:DA:6D:5C:A6:C7:0B:1F X509v3 Authority Key Identifier: keyid:26:15:96:B5:56:E9:2C:12:D2:EB:C8:DD:8B:25:CF:B8:75:8E:07:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JhWWtVbpLBLS68jdiyXPuHWOB4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC48/DBBD81FE753A11EEBF49E534C4F9AE02/JhWWtVbpLBLS68jdiyXPuHWOB4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:db:80:19:6b:2a:8e:3b:b7:4e:6a:e0:55:4a:52:05:ce:a4: 49:ff:3c:d7:6c:63:14:10:dc:ca:ce:4e:d0:09:99:ce:5b:9b: 85:29:b2:a7:a4:da:49:7b:07:68:4e:ae:cd:c1:af:7f:3e:a4: 72:26:e7:ec:95:1a:7f:df:ec:92:5a:89:22:37:31:63:32:d1: 8c:2a:b7:38:97:50:f5:11:8b:e1:b9:bb:95:47:af:1c:86:ce: ff:3d:5f:cb:26:e0:18:53:36:ea:37:85:6b:d7:df:b4:d7:28: cd:71:3b:b8:75:ed:32:3b:ea:81:f5:12:e8:94:8f:91:ea:ad: de:08:44:23:72:32:02:32:55:23:f3:77:43:9a:16:18:46:ea: 34:10:e9:15:8f:f4:b4:6f:ed:97:52:40:08:a3:d5:51:c2:f4: df:2a:44:8d:b3:f5:32:fa:7d:8a:cf:2a:c7:21:65:7a:ff:44: 2a:49:fc:3a:f5:10:5e:72:43:61:e8:a6:70:1a:1f:3d:6d:47: da:f8:fb:15:17:99:13:21:2c:bf:d5:91:1f:4e:45:25:0b:fe: c1:47:74:91:1c:d0:1f:16:41:3a:72:c6:d9:9e:63:98:c8:11: 9d:31:a4:5c:c0:c1:4a:14:4e:b6:03:be:e1:b3:4f:34:e3:94: 4c:e8:df:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZDNDgxMTAvBgNVBAUTKDI2MTU5NkI1NTZFOTJDMTJEMkVCQzhERDhCMjVDRkI4 NzU4RTA3OEMwHhcNMjUwODIzMDQxNjQxWhcNMjUwODMwMDQxNjQxWjAYMRYwFAYD VQQDEw02OGE5NDBhOS0wNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LBaDfdDe+UbN+YO7lwD7SoKITJib2ujpLtwOq+0wOQfO88N7J95Zoc1Qswq Fr44uU7uqlT97JQIFIJhwzayKYoOERMnO5g6guoRotKhdWALuOCs7/GjnLfC1Kkn D+blxuXhYgoT6Eua2EVQlyL0Rx4iS0RKpixaZh7dXU7klW1uOcuq1yu8h+FqISN2 ifO0m8QrLApZxy23fQolRGCqwS3PWns2i7VfNfyy0JlPtpkC6OFAVC9LLXwwo1Ex 2ittNAvhajoI59CH8tUU/zBnORyshz8sgJRl5wSj4Q8O8/Ess1sZv4aLwGMF3b0E CSVbMekUrqQNBxouNoKTU3nBpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTJxSIT x8n7MF/nCW3abVymxwsfMB8GA1UdIwQYMBaAFCYVlrVW6SwS0uvI3Yslz7h1jgeM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0OC9EQkJEODFGRTc1 M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExCTFM2OGpkaXlYUHVIV09C NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0poV1d0VmJwTEJMUzY4amRpeVhQdUhXT0I0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkM0OC9EQkJEODFGRTc1M0ExMUVFQkY0OUU1MzRDNEY5QUUwMi9KaFdXdFZicExC TFM2OGpkaXlYUHVIV09CNHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ24AZayqOO7dOauBVSlIFzqRJ/zzXbGMUENzKzk7QCZnOW5uFKbKn pNpJewdoTq7Nwa9/PqRyJufslRp/3+ySWokiNzFjMtGMKrc4l1D1EYvhubuVR68c hs7/PV/LJuAYUzbqN4Vr19+01yjNcTu4de0yO+qB9RLolI+R6q3eCEQjcjICMlUj 83dDmhYYRuo0EOkVj/S0b+2XUkAIo9VRwvTfKkSNs/Uy+n2KzyrHIWV6/0QqSfw6 9RBeckNh6KZwGh89bUfa+PsVF5kTISy/1ZEfTkUlC/7BR3SRHNAfFkE6csbZnmOY yBGdMaRcwMFKFE62A77hs08045RM6N+i -----END CERTIFICATE-----Generated at Sat Aug 23 20:15:45 2025 by rpki-client